summaryrefslogtreecommitdiffstats
path: root/chrome/renderer/renderer.sb
diff options
context:
space:
mode:
authorjeremy@chromium.org <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2009-10-09 16:23:10 +0000
committerjeremy@chromium.org <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2009-10-09 16:23:10 +0000
commit810d6408e8553435b97151805a9ed48ffe8d610e (patch)
treed62eb1b03094529dcf216d489d566ff0d71a5a39 /chrome/renderer/renderer.sb
parent20a4a446ecc18a143d396f6cb7b16414df59cef3 (diff)
downloadchromium_src-810d6408e8553435b97151805a9ed48ffe8d610e.zip
chromium_src-810d6408e8553435b97151805a9ed48ffe8d610e.tar.gz
chromium_src-810d6408e8553435b97151805a9ed48ffe8d610e.tar.bz2
Some fixes to the OS X Sandbox:
* Added a command line option to enable verbose logging in the Sandbox. This will be useful when we start looking at the information in ChromeBot. * Modified the code that splices the homedir path into the Sandbox file. This code is now only used on 10.6 and no longer uses a regex. * Moved sandbox code out into a sandbox_mac file. * Changed 10.6 seed release references -> 10.6 . BUG=21483 TEST=Browser should launch and display NTP correctly on OS X 10.5 & 10.6 Review URL: http://codereview.chromium.org/242165 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@28541 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/renderer/renderer.sb')
-rw-r--r--chrome/renderer/renderer.sb12
1 files changed, 7 insertions, 5 deletions
diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb
index 42ca75d..e9f6094 100644
--- a/chrome/renderer/renderer.sb
+++ b/chrome/renderer/renderer.sb
@@ -5,6 +5,8 @@
;;
(version 1)
(deny default)
+; Support for programmatically enabling verbose debugging.
+;ENABLE_LOGGING (debug deny)
; Allow sending signals to self - http://crbug.com/20370
(allow signal (target self))
@@ -14,7 +16,7 @@
; Each line is marked with the System version that needs it.
; This profile is tested with the following system versions:
-; 10.5.6, 10.6 seed release
+; 10.5.6, 10.6
; Allow following symlinks
(allow file-read-metadata) ; 10.5.6
@@ -26,12 +28,12 @@
; Needed for Fonts.
(allow file-read-data (regex #"^/System/Library/Fonts")) ; 10.5.6
-(allow file-read-data (regex #"^/Library/Fonts")) ; 10.6 seed release
+;10.6_ONLY (allow file-read-data (regex #"^/Library/Fonts")) ; 10.6
(allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6
-(allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 seed release
+;10.6_ONLY (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6
; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269
-(allow file-read-data (regex #"^USER_HOMEDIR/Library/Fonts")) ; 10.6 seed release
+;10.6_ONLY (allow file-read-data (subpath "USER_HOMEDIR/Library/Fonts")) ; 10.6
; Needed for IPC on 10.6
-(allow ipc-posix-shm)
+;10.6_ONLY (allow ipc-posix-shm)